From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Subject: Resolving syscall numbers Date: Mon, 12 Jun 2006 11:10:26 -0400 Message-ID: <448D83E2.3010907@ornl.gov> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Return-path: Received: from mx1.redhat.com (mx1.redhat.com [172.16.48.31]) by int-mx1.corp.redhat.com (8.12.11.20060308/8.12.11) with ESMTP id k5CFAYLm023123 for ; Mon, 12 Jun 2006 11:10:34 -0400 Received: from emroute3.ornl.gov (emroute3.ornl.gov [160.91.4.110]) by mx1.redhat.com (8.12.11.20060308/8.12.11) with ESMTP id k5CFAW39006574 for ; Mon, 12 Jun 2006 11:10:32 -0400 Received: from emroute3.ornl.gov (localhost [127.0.0.1]) by emroute3.ornl.gov (PMDF V6.2-1x9 #31038) with ESMTP id <0J0R00C5L65J3M@emroute3.ornl.gov> for linux-audit@redhat.com; Mon, 12 Jun 2006 11:10:31 -0400 (EDT) Received: from ORNLEXCHANGE.ornl.gov (ornlexchange1.ornl.gov [160.91.1.20]) by emroute3.ornl.gov (PMDF V6.2-1x9 #31038) with ESMTP id <0J0R00C2A65IHU@emroute3.ornl.gov> for linux-audit@redhat.com; Mon, 12 Jun 2006 11:10:31 -0400 (EDT) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com This may not be appropriate for this list, if it isn't I apologize and you may ignore it. Is there an quick way to resolve the syscall number that auditd returns within a message to a syscall name? (ie. 5->open)? I am programming in C, if that helps. Thanks, Steve